What are passkeys?
Passkeys are a new and more secure way to sign in and confirm actions in Finom on the web. They are digital credentials stored on your device that use your device's security features to confirm your identity. Instead of entering a password and using a mobile app or receiving an SMS code every time you sign in or confirm an action (such as payment) in Finom you can simply use your computer's or mobile device's fingerprint, Face ID, screen lock, or even a USB security key to confirm that it's you.
Passkeys are also more secure because they are linked to Finom's verified website. This means that passkeys cannot be used to confirm your identity on a fraudulent website.
How to use passkeys to sign in and confirm actions in Finom?
If you have set up a passkey, you can use it to confirm your identity when signing in or confirming actions in Finom on the web.
When signing in, after entering your email, you will be prompted to use your preferred method, such as fingerprint, Face ID, screen lock, or a security key, to confirm your identity. This will grant you access to your Finom account within seconds!
If you have passkeys set up in Finom, you can also use them for a more secure and convenient way to confirm sensitive actions when signed in, such as sending payments or ordering a card. This feature is activated automatically when you have at least one passkey set up - simply use your preferred authentication method when prompted. Please note that not all actions within Finom may currently support passkey confirmation.
How do I set up a passkey?
To set up a passkey, follow these steps:
Go to Settings → Security → Passkeys.
Click on "Create passkey".
Follow the instructions provided to set up your new passkey.
You can use your computer, mobile phone, or a USB security key to set up your passkey. We recommend adding multiple passkeys - so if you lose access to one of them, you can still easily access your account using the other ones.
Please do not use devices that are not yours or accessible to the public as passkeys. This is because anyone who can unlock these devices (knowing the password, screen lock, or having a fingerprint/face registered on the device) can verify your identity in your account.
If you want to use a mobile device as a passkey, you typically have to scan a QR code with your camera and confirm your identity via biometrics or screen lock. For computers, the method depends on the type of security your computer has. You can scan your fingerprint or use the screen lock. If you're using a USB security key, you'll need to plug it into your computer and enter a PIN code or use biometrics.
To learn more about passkeys, how to set them up, and how to manage them within your operating system, refer to the manuals for your specific device or browser:
How do I overview and manage my passkeys?
Go to Settings → Security → Passkeys. Here, you will find a list of the passkeys currently installed in your account. You can see when they were set up and last used, and also have the option to rename or remove any of them.
To rename a passkey, click Rename passkey and change it to your desired name.
To remove a passkey, click on Remove passkey and confirm the action using your passkey or password.
Which devices can I use as passkeys?
You can use your computer, mobile device, or an external USB security key (such as YubiKey or Google Titan) as a passkey.
We recommend using multiple devices as passkeys - not only for your convenience and choice of access method, but also so that if you lose access to any of them, you can still access your account.
Please do not use devices that are not yours or accessible to the public as passkeys. This is because anyone who can unlock these devices (knowing the password, screen lock, or having a fingerprint/face registered on the device) can verify your identity and sign in to your account.
I can't set up a passkey. What should I do?
First, ensure that your browser is updated to the latest version. The minimum versions of browsers that natively support passkeys are:
Chrome: 105 and onwards
Safari: 16 and onwards
Microsoft Edge: 105 and onwards
If you're using Firefox: Firefox has limited support for passkeys depending on the device and OS version you're using. For Firefox users, we recommend using a password manager extension that supports passkeys.
If you're using your mobile device as a passkey, make sure it's updated to the latest version of the operating system, as earlier versions may not support passkeys. Passkeys are supported on:
iOS 16 and onwards
Android 9 and onwards
Ensure that Bluetooth is turned on both on your computer and your device, and the mobile device you're using as a passkey is in close proximity to your computer so they can connect and confirm your identity.
If you're using iOS or macOS to set up passkeys, try enabling iCloud Keychain in your operating system settings.
I've lost access to my passkey, what do I do?
If you can sign in to your account using another passkey or your mobile app, follow these steps:
Go to Settings → Security → Passkeys to view the passkeys currently in use.
To remove a specific passkey, click Remove passkey and confirm the removal using your other passkey or your password.
If you don't have access to any of your passkeys or your mobile app and cannot sign in to your account, follow these steps:
Go to the Sign in page.
Click Forgot your password? and proceed with the steps to change your account's password.
After regaining access to your account, all your passkeys will be removed, and you will be able to set up new ones.
Can I still use Finom mobile app or SMS to sign in and confirm actions when I have passkeys installed?
If you have passkeys installed, you can continue to use your Finom mobile app to sign in and confirm actions as usual. When prompted to use a passkey, cancel the passkey prompt in your browser and select "Try another way" on the pop-up.
However, please note that when you have passkeys installed, you will not be able to use SMS to sign in or confirm your identity. SMS is considered an outdated and unsafe standard, as it lacks end-to-end encryption, can be intercepted by attackers or used to impersonate you on a phishing website. Therefore, we do not recommend using SMS for authenticating your actions or signing in to your account.
If you require any support, don't hesitate to contact us using our in-app chat, or via email at [email protected].